From c3d43d2b47748f5e0278f01371398ed3e65ccdab Mon Sep 17 00:00:00 2001 From: rogersb11 Date: Thu, 12 Nov 2015 04:06:26 -0500 Subject: Revert "Remove device specific SEPolicy" Will follow with policy updates This reverts commit 8e368fa918f244e214ee8bd53ce332ce6ad74663. Change-Id: I58247300df68442709b44623e29b1bee0c6d5496 --- selinux/qmuxd.te | 51 +++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 51 insertions(+) create mode 100644 selinux/qmuxd.te (limited to 'selinux/qmuxd.te') diff --git a/selinux/qmuxd.te b/selinux/qmuxd.te new file mode 100644 index 0000000..da255f2 --- /dev/null +++ b/selinux/qmuxd.te @@ -0,0 +1,51 @@ +type qmuxd, domain; +type qmuxd_exec, exec_type, file_type; +net_domain(qmuxd) +init_daemon_domain(qmuxd) + +userdebug_or_eng(` + domain_auto_trans(shell, qmuxd_exec, qmuxd) + domain_auto_trans(adbd, qmuxd_exec, qmuxd) +') + +#Allow qmuxd to operate on various qmux device sockets +#allow qmuxd qmux_radio_socket:dir { write add_name remove_name search }; +#allow qmuxd qmux_radio_socket:sock_file { create setattr getattr write unlink }; +#allow qmuxd qmux_audio_socket:dir { write add_name remove_name search }; +#allow qmuxd qmux_audio_socket:sock_file { create setattr getattr write unlink }; +#allow qmuxd qmux_gps_socket:dir { write add_name remove_name search }; +#allow qmuxd qmux_gps_socket:sock_file { create setattr getattr write unlink }; +#allow qmuxd qmux_bluetooth_socket:dir { write add_name remove_name search }; +#allow qmuxd qmux_bluetooth_socket:sock_file { create setattr getattr write unlink }; + +qmux_socket(qmuxd); + +#Allow logging +allow qmuxd diag_device:chr_file { rw_file_perms }; + +#Allow operation in platform specific transports +allow qmuxd smd_device:chr_file { rw_file_perms }; +allow qmuxd hsic_device:chr_file { rw_file_perms }; + +#Allow qmuxd to operate in platform specific transports +allow qmuxd sysfs_smd_open_timeout:file w_file_perms; +allow qmuxd sysfs_wake_lock:file { append open }; + +#Allow qmuxd to write in hsic specific transport +allow qmuxd sysfs:file w_file_perms; +allow qmuxd radio_device:file w_file_perms; + +allow qmuxd self:capability { setuid setgid setpcap dac_override }; + +#Allow qmuxd to have the CAP_BLOCK_SUSPEND capability +allow qmuxd qmuxd:capability2 { block_suspend }; + +allow qmuxd sysfs_esoc:dir r_dir_perms; +allow qmuxd sysfs_hsic_modem_wait:file w_file_perms; +allow qmuxd sysfs_esoc:lnk_file read; + +r_dir_file(qmuxd, sysfs_ssr); +allow qmuxd mhi_device:chr_file rw_file_perms; + +allow qmuxd qmuxd:process { execmem }; +allow qmuxd radio_device:chr_file {read write open }; \ No newline at end of file -- cgit v1.2.3